CVE-2019-3780

CVE-2019-3780 affects Cloud Foundry Container Runtime versions prior to 0.28.0, where Kubernetes worker nodes are deployed with configuration files containing IaaS credentials. A malicious actor with access to these Kubernetes nodes can obtain these credentials, leading to privilege escalation and potential compromise of the entire IaaS account. This vulnerability is rated 8.8 HIGH due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.